Checkmarx

Name: Checkmarx
Brand: Checkmarx
Rating: 4.1 (56 reviews)

Claim this tool Editor reviewed

Application security testing platform

Paid plans only, free trial

Paid Security Developer Tools Testing & QA DevOps

Visit Website

4.1 (56 across the web)

Paid Visit Website

Reviews on G2 Capterra

56 reviews tracked

The Bottom Line

Updated May 26, 2026

Price: Paid plans only, free trial. Compare plans

Key facts

Checkmarx is an enterprise application security testing platform for finding vulnerabilities in code
It provides SAST, SCA, and DAST scanning integrated into CI/CD pipelines
Custom enterprise pricing based on codebase size and scanning requirements

Pros

Enterprise SAST
Good vulnerability detection
CI/CD integration
Compliance support
Many languages

Cons

Very expensive
False positives
Learning curve
Complex setup
Slow scans

What is Checkmarx?

Editorial review

Checkmarx scans code for security vulnerabilities throughout the development process. Static analysis finds issues in source code. Dependency scanning catches vulnerable packages. Everything integrates into CI/CD. The platform covers the full application security stack. Findings prioritize by risk. Developer tools make fixing issues part of the workflow. Enterprise development organizations with security requirements choose Checkmarx for comprehensive application security testing at scale.

Available on: Web

Louis Corneloup Updated May 26, 2026 · how we evaluate Source checkmarx.com ↗

Ratings Across the Web

4.1 (56 reviews)

Checkmarx holds an aggregate rating of 4.1 out of 5 from 56 reviews across G2 and Capterra, last checked September 17, 2026.

Ratings aggregated from independent review platforms. Learn more

Key Features

SAST
SCA
IAST
API security
IaC scanning
Enterprise

Pricing Plans

Free Trial

Pricing checked Oct 6, 2026

Checkmarx plans and prices, checked October 2026
Plan	Price	Details
Essentials	Custom	Core AppSec SAST SCA API Security +1 more Show less ASPM dashboard
Professional	Custom	Expanded coverage All Essentials DAST Container Security +1 more Show less Malicious package protection
Enterprise	Custom	Complete solution All Professional IaC Security Secrets Detection +1 more Show less Codebashing training

View full pricing

Full Checkmarx pricing: every plan, hidden costs and alternatives

Reviews

Improve Your Thinking Patterns Using ChatGPT cover

$99 Free with your review

Review Checkmarx, get a free AI guide

Share your experience and we will send you Improve Your Thinking Patterns Using ChatGPT, free.

Write a review

4.1/5

Across 56 verified user reviews on G2, Capterra

Add your hands-on experience using the offer above to help the next buyer.

Best Checkmarx Alternatives

Top alternatives based on features, pricing, and user needs.

SonarQube Freemium

Automated code review for bugs, vulnerabilities, and code smells

4.4

Snyk Freemium

Secure your code, dependencies, containers, and IaC from dev to production

4.5

Fortify Freemium

Comprehensive application security testing for identifying and remediating vulnerabilities.

4.5

Veracode Paid

Application security testing platform

4.1

See all security tools →

Still deciding?

Most buyers shortlist 2 or 3 tools before committing. Pull a side-by-side comparison or browse the full alternatives shortlist below.

Checkmarx vs SonarQube Head-to-head: features, pricing, who wins Checkmarx vs Snyk Head-to-head: features, pricing, who wins Checkmarx vs Fortify Head-to-head: features, pricing, who wins

Explore More

Checkmarx FAQ

How does Checkmarx help secure applications during development?

Checkmarx scans code for security vulnerabilities throughout the development process, using static analysis to find issues directly in source code. It also performs dependency scanning to identify vulnerable packages. This integration into CI/CD pipelines helps ensure security is addressed continuously.

Which teams benefit most from using Checkmarx?

Enterprise development organizations with stringent security requirements are the primary beneficiaries of Checkmarx. It provides comprehensive application security testing at scale, making it suitable for large teams needing robust security measures.

How does Checkmarx compare to Veracode?

Checkmarx, like Veracode, offers enterprise-grade static application security testing (SAST) and integrates into CI/CD pipelines. However, Checkmarx is noted for its extensive language support and strong vulnerability detection, while users report it can be more expensive and have a steeper learning curve.

What kind of trade-offs should users consider when adopting Checkmarx?

Users should be aware that Checkmarx can be very expensive and may involve a complex setup process. It also has a learning curve and can produce false positives, which might require additional effort to manage.

How is Checkmarx priced?

Checkmarx is offered as a paid product, designed for enterprise use. It does not include a permanently free tier for ongoing use.

Can Checkmarx integrate with existing development workflows?

Yes, Checkmarx is designed to integrate into CI/CD pipelines, making security testing a part of the continuous development process. It also provides developer tools to help incorporate fixing issues directly into the workflow.

Source: checkmarx.com

Guides & Articles

Best Application Security Platforms in 2026

Features Checkmarx

Best MCP Gateways & AI Agent Security Tools 2026

Expert guide

Best Deepfake Detection Tools 2026

Expert guide